Alexander Heldt
cffaec5fe8
Wire the offline-first todo app (github: local /home/alex/code/todo) into manatee, following the app-module convention: - flake input `todo` (local git checkout for now; gitea URL commented) with nixpkgs following. - hosts/manatee/modules/todo: mod.todo option importing the app's NixOS module; runs on 127.0.0.1:8091, secureCookies, token from agenix; the host owns the nginx vhost (todo.ppp.pm, forceSSL + useACMEHost) and homepage card. - mod.todo.enable = true. - certs: todo.ppp.pm DNS-01 cert via hetzner. - home-assistant DNS updater: add `todo` to the Hetzner subdomain list. - secrets: todo-token.age (encrypted access token) + recipients in secrets.nix.
config-manager
./config-manager is a module that contains a script to make usage of this flake easier.
To install it
- first add the module to the nixOS system connfiguration
- set
config-manager.flakePath = <path to this flake> - run
nixos-rebuild switch --flake .#<configuration>after thatcmwill be available on$PATH.
Secrets
Secrets are managed by agenix (https://github.com/ryantm/agenix).
Creating new secrets
-
Update
secrets/secrets.nixwith the new secret. -
When inside
./secrets:
EDITOR=vim agenix -e "some-secret.age"
This will create a new secret. To view its content one can do:
EDITOR=vim agenix -d "some-secret.age" -i ~/.ssh/alex.pinwheel
Or use some other SSH key that is has been used to key the secret.
Test VM
Build the test VM with the command:
cm --build-test-vm
and test it with:
cm --run-test-vm